Deployment Architecture

How to enable UDP input for splunk LWF?

Alan_Bradley
Path Finder

Apparently enabling LWF turns off udp input. What are the step steps to enable it?

0 Karma
1 Solution

matt
Splunk Employee
Splunk Employee

Run the command

./splunk enable module input/UDP input/UDP enabled.

You need to restart the Splunk Server for your changes to take effect.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

You should instead enable it by creating a conf file default-mode.conf containing:

[pipeline:udp]
disabled = false

the_wolverine
Champion

Which version does this apply to? I ran it in 4.1.5 and Splunk returns a message that the command is deprecated:

sh-3.2# ./splunk enable module input/UDP This command is deprecated.

0 Karma

gkanapathy
Splunk Employee
Splunk Employee

see other answer

0 Karma

matt
Splunk Employee
Splunk Employee

Run the command

./splunk enable module input/UDP input/UDP enabled.

You need to restart the Splunk Server for your changes to take effect.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...